Beveiligingsadvies

CVE-2023-3439

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-28 00:00:00
Laatst bijgewerkt 2025-03-10 21:08:54
Toegewezen door fedora
CVSS-score 4.7
Status PUBLISHED

Beschrijving

A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. However, a running routine may be unaware of this and cause the use-after-free of the mdev->addrs object, potentially leading to a denial of service.